[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade node-problem-detector to 0.8.20 fix CVE-2023-44487 - branch 3.0-dev (#12707)

CBL-Mariner-Bot · web-flow · commit c73731879771 · 2025-03-04T08:35:33.000-05:00
diff --git a/SPECS/node-problem-detector/node-problem-detector.signatures.json b/SPECS/node-problem-detector/node-problem-detector.signatures.json
@@ -1,7 +1,7 @@
 {
- "Signatures": {
-  "node-problem-detector-0.8.15.tar.gz": "349cfd7f995218abb208391b16a4c5191877dfaf9d6208700fe6225de62fab2f",
-  "node-problem-detector-0.8.15-vendor.tar.gz": "8515aad9f408d7e040f4589a649799f6ace8a777bc74d9a2a18cafd0092ac25c",
-  "node-problem-detector-0.8.15-test-vendor.tar.gz": "cdff5ed0f4ceb009b3b34eb52980dd94dc204fbaf2bac78bc6f4ac662843d782"
- }
+  "Signatures": {
+    "node-problem-detector-0.8.15-vendor.tar.gz": "8515aad9f408d7e040f4589a649799f6ace8a777bc74d9a2a18cafd0092ac25c",
+    "node-problem-detector-0.8.15-test-vendor.tar.gz": "cdff5ed0f4ceb009b3b34eb52980dd94dc204fbaf2bac78bc6f4ac662843d782",
+    "node-problem-detector-0.8.20.tar.gz": "0580a72d59483997dc5ef68b8f65c6119ad3373347624d555d89b3ad9947380e"
+  }
 }
diff --git a/SPECS/node-problem-detector/node-problem-detector.spec b/SPECS/node-problem-detector/node-problem-detector.spec
@@ -1,7 +1,7 @@
 Summary:        Kubernetes daemon to detect and report node issues
 Name:           node-problem-detector
-Version:        0.8.15
-Release:        4%{?dist}
+Version:        0.8.20
+Release:        1%{?dist}
 License:        ASL 2.0
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@@ -111,6 +111,9 @@ make test
 %config(noreplace) %{_sysconfdir}/node-problem-detector.d/*
 
 %changelog
+* Thu Feb 27 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 0.8.20-1
+- Auto-upgrade to 0.8.20 - fix CVE-2023-44487
+
 * Fri Feb 14 2025 Kanishk Bansal <kanbansal@microsoft.com> - 0.8.15-4
 - Address CVE-2023-45288
 
diff --git a/cgmanifest.json b/cgmanifest.json
@@ -14302,8 +14302,8 @@
         "type": "other",
         "other": {
           "name": "node-problem-detector",
-          "version": "0.8.15",
-          "downloadUrl": "https://github.com/kubernetes/node-problem-detector/archive/refs/tags/v0.8.15.tar.gz"
+          "version": "0.8.20",
+          "downloadUrl": "https://github.com/kubernetes/node-problem-detector/archive/refs/tags/v0.8.20.tar.gz"
         }
       }
     },

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`		`- "Signatures": {`
`3`		`- "node-problem-detector-0.8.15.tar.gz": "349cfd7f995218abb208391b16a4c5191877dfaf9d6208700fe6225de62fab2f",`
`4`		`- "node-problem-detector-0.8.15-vendor.tar.gz": "8515aad9f408d7e040f4589a649799f6ace8a777bc74d9a2a18cafd0092ac25c",`
`5`		`- "node-problem-detector-0.8.15-test-vendor.tar.gz": "cdff5ed0f4ceb009b3b34eb52980dd94dc204fbaf2bac78bc6f4ac662843d782"`
`6`		`- }`
	`2`	`+ "Signatures": {`
	`3`	`+ "node-problem-detector-0.8.15-vendor.tar.gz": "8515aad9f408d7e040f4589a649799f6ace8a777bc74d9a2a18cafd0092ac25c",`
	`4`	`+ "node-problem-detector-0.8.15-test-vendor.tar.gz": "cdff5ed0f4ceb009b3b34eb52980dd94dc204fbaf2bac78bc6f4ac662843d782",`
	`5`	`+ "node-problem-detector-0.8.20.tar.gz": "0580a72d59483997dc5ef68b8f65c6119ad3373347624d555d89b3ad9947380e"`
	`6`	`+ }`
`7`	`7`	`}`
Original file line number	Diff line number	Diff line change
`@@ -14302,8 +14302,8 @@`
`14302`	`14302`	`"type": "other",`
`14303`	`14303`	`"other": {`
`14304`	`14304`	`"name": "node-problem-detector",`
`14305`		`- "version": "0.8.15",`
`14306`		`- "downloadUrl": "https://github.com/kubernetes/node-problem-detector/archive/refs/tags/v0.8.15.tar.gz"`
	`14305`	`+ "version": "0.8.20",`
	`14306`	`+ "downloadUrl": "https://github.com/kubernetes/node-problem-detector/archive/refs/tags/v0.8.20.tar.gz"`
`14307`	`14307`	`}`
`14308`	`14308`	`}`
`14309`	`14309`	`},`